Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          EtjpFCXgUCE+YtzN0BaByyu0UVihpe5gE1bXkKF+/JM=
Subject key identifier:   A0:76:E3:E9:BD:4D:0B:11:83:28:CD:AC:99:31:42:A1:FD:82:28:2D
Certificate issuer:       /CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
Certificate serial:       628FDA7FF0EC781BB7F10147EA622D54FA5C76CA
Authority key identifier: 13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 02 Apr 2024 14:40:32 +0000
ROA not before:           Tue 02 Apr 2024 14:35:32 +0000
ROA not after:            Tue 01 Apr 2025 14:40:32 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:da:7f:f0:ec:78:1b:b7:f1:01:47:ea:62:2d:54:fa:5c:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13FDACDC2F1641AAEF2664C2C19927624122A6A5
        Validity
            Not Before: Apr  2 14:35:32 2024 GMT
            Not After : Apr  1 14:40:32 2025 GMT
        Subject: CN=A076E3E9BD4D0B118328CDAC993142A1FD82282D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:66:82:b8:17:ca:ba:5b:50:05:92:ac:52:
                    a4:cb:b2:d2:bf:8e:96:42:41:c1:48:f9:57:31:bf:
                    00:ef:99:a1:f3:0a:66:43:a6:54:1a:d1:06:31:55:
                    d2:08:de:1e:74:ff:75:51:2b:79:b9:6f:fd:ce:ca:
                    c3:ca:2d:6c:5f:3a:ec:48:bd:94:9c:c8:55:fe:ff:
                    80:a8:a5:57:35:2a:9e:7b:90:a0:f4:9e:14:fe:24:
                    ed:4a:e0:cd:03:90:72:d1:96:09:65:99:5f:9b:66:
                    48:70:4b:c0:a0:39:83:7c:09:d4:1e:2e:5d:8c:af:
                    42:c6:a7:88:67:15:f9:dc:32:2b:85:47:b2:28:4e:
                    a0:65:8b:6a:26:95:3d:14:81:73:a2:33:d8:c6:30:
                    96:a1:90:68:12:ca:b3:55:f1:e7:5d:6d:e1:30:ad:
                    dc:cc:2f:97:91:28:ed:bc:b4:b3:d2:79:85:25:4f:
                    7a:90:69:da:9f:e8:a6:0e:57:33:2d:a6:5b:4a:56:
                    54:7f:c2:1b:32:3c:15:18:e9:36:9f:83:cd:6c:82:
                    30:de:37:89:8a:c8:95:76:ee:99:16:54:5c:b3:8d:
                    cb:7f:6b:d4:62:0c:d6:17:87:11:d4:9d:97:b9:c7:
                    d1:ca:be:4f:db:45:21:22:65:07:d5:94:09:ae:53:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:76:E3:E9:BD:4D:0B:11:83:28:CD:AC:99:31:42:A1:FD:82:28:2D
            X509v3 Authority Key Identifier:
                keyid:13:FD:AC:DC:2F:16:41:AA:EF:26:64:C2:C1:99:27:62:41:22:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13FDACDC2F1641AAEF2664C2C19927624122A6A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:e1:76:70:ff:f2:91:bc:2c:e5:2e:43:b8:06:f1:1e:0e:
         09:87:3c:95:23:a8:f4:9b:1e:4e:4a:ed:33:03:be:5e:b8:7f:
         e2:0b:10:57:1e:fb:71:1b:89:88:d2:25:b7:91:32:31:ce:af:
         35:0c:ef:17:dd:57:3c:0c:87:cd:2a:f1:b8:9c:f5:35:96:55:
         7b:09:1a:ec:5d:a1:33:52:cc:46:b1:51:41:6c:ae:01:61:28:
         04:b4:1f:f7:2a:80:af:f1:72:53:80:0b:17:49:8e:96:93:fe:
         7b:1d:51:e1:59:36:cf:80:dc:07:62:1b:b9:ed:07:a0:b5:cf:
         78:75:e4:c4:4b:0b:7d:75:3d:ca:8d:67:1e:1c:c4:06:db:d9:
         54:e5:a5:1c:c3:70:b4:57:4e:3c:66:c8:e5:db:1e:6d:40:a4:
         3c:19:51:41:68:ec:4c:e5:40:cf:1c:85:36:3c:2f:48:4e:0b:
         34:ce:49:77:e1:22:30:ec:bb:01:cc:af:ec:55:d2:22:b6:96:
         2e:83:6a:b9:73:3b:ba:84:d0:9d:e2:b4:ce:b4:71:4a:71:42:
         70:2a:f7:cc:3d:7f:11:55:de:c0:31:3d:c1:1d:b3:4c:e6:86:
         50:6a:b1:60:26:19:62:53:bb:5a:82:a9:c6:cc:26:4b:09:63:
         19:70:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:50 2025 by rpki-client